Deciding How Deep Your Directory Is
You??™re trying to plan for the future, and you want to design your DIT so smartly that
it will seamlessly expand as your organization grows. It??™s a noble goal, for sure! So,
you??™re wondering if you should structure it widely and shallowly, or more narrowly
and deeply. This is the problem that all LDAP administrators face, and as always, the
definitive answer is ???it depends.??? My own preference is toward a shallower directory
structure because it??™s easier to maintain, and because LDAP is optimized for searches
along a level, rather than up and down the hierarchy.
Figure 12-2 shows a DIT with three OUs.
Figure 12-2. The DIT sprouts limbs
dc=foo,
dc=com
ou=downstairs
ou=upstairs ou=inside
338 | Chapter 12: Centralized Network Directory with OpenLDAP
This seems all nice and organized, doesn??™t it? Three separate departments each with
their own OU, which feels all satisfying, like a tidy filing cabinet. But think about
it??”what if Jenn from Upstairs gets moved to Downstairs? You??™ll have remove her
entry from Upstairs and create a new one in Downstairs, which is several steps, no
matter how efficient you are.
Pages:
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543